This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/323830333a6136303a3a2f33322d3332203d3e20323637383738.roa
File:                     323830333a6136303a3a2f33322d3332203d3e20323637383738.roa (raw, json)
Hash identifier:          ZIozX63aTQXdv6d2Ok0KXhPaCWW5mhOFXrAAZff0bZo=
Subject key identifier:   2D:10:6F:73:D8:8C:0E:B2:60:D2:DD:62:F5:A2:43:86:58:75:A6:D9
Certificate issuer:       /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial:       6AF907BCA4ECF081C3C37339055AD582D0E2491E
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/323830333a6136303a3a2f33322d3332203d3e20323637383738.roa
Signing time:             Tue 06 Jan 2026 19:16:47 +0000
ROA not before:           Tue 06 Jan 2026 19:11:47 +0000
ROA not after:            Tue 05 Jan 2027 19:16:47 +0000
asID:                     267878
IP address blocks:        2803:a60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f9:07:bc:a4:ec:f0:81:c3:c3:73:39:05:5a:d5:82:d0:e2:49:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
        Validity
            Not Before: Jan  6 19:11:47 2026 GMT
            Not After : Jan  5 19:16:47 2027 GMT
        Subject: CN=2D106F73D88C0EB260D2DD62F5A243865875A6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:8c:f6:90:8b:da:e2:bc:47:28:2b:7b:ad:
                    8c:31:37:83:12:fd:62:22:fa:07:2d:7d:96:a1:63:
                    da:99:ef:7f:bf:e7:5d:81:67:fb:5d:ae:b3:56:5f:
                    22:fe:0e:1d:94:ec:9e:24:1b:3c:2d:2b:52:9a:47:
                    f3:d4:bc:c5:30:d8:83:b7:0e:17:f9:c3:0f:96:d8:
                    ec:a3:bf:6f:87:14:ef:7d:ff:8c:a1:2b:a9:4b:03:
                    55:78:3b:e0:d3:93:7f:14:dc:5b:da:03:92:a2:52:
                    a1:63:e8:52:93:07:e6:87:5a:dd:64:91:66:01:d7:
                    a1:76:72:a7:0f:e0:b3:82:91:af:33:7b:30:2f:c2:
                    a6:a1:73:c5:d4:c0:52:40:58:36:d4:ed:1f:8c:39:
                    ea:d4:33:73:a5:05:ad:35:72:89:c5:90:c7:e7:fa:
                    c8:48:55:0a:30:7e:a8:49:30:36:08:26:2f:c6:a3:
                    80:23:15:c7:53:b9:b9:45:f3:29:ae:67:34:ac:93:
                    55:84:ba:65:5c:3a:4c:db:a1:3d:4f:1e:f8:be:da:
                    c0:2a:c7:02:66:eb:bc:f7:21:ab:5f:75:8f:f5:31:
                    2d:b5:b6:71:34:db:2a:7d:04:37:87:41:3f:f9:63:
                    18:ce:cf:51:13:15:ea:b8:90:8d:af:1b:9b:2e:1c:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:6F:73:D8:8C:0E:B2:60:D2:DD:62:F5:A2:43:86:58:75:A6:D9
            X509v3 Authority Key Identifier:
                keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/323830333a6136303a3a2f33322d3332203d3e20323637383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:2a:54:95:4b:14:ac:4b:53:a0:e1:85:95:8c:45:55:f8:
         db:a4:79:35:b0:c5:41:42:20:1a:ec:95:90:17:69:85:ae:0c:
         1a:25:d0:16:64:8a:10:f2:38:96:ae:a2:3f:91:df:dd:23:41:
         2d:48:74:ed:6e:90:70:38:1f:03:3d:6f:31:02:a9:20:2f:dd:
         fe:e9:4b:7e:4b:67:fe:4e:cc:c6:73:ef:c5:0d:25:0c:ea:be:
         3e:62:83:27:6d:47:2a:84:84:e5:20:df:80:1c:e1:c5:18:b6:
         31:81:e8:a5:97:e2:0a:9d:bb:2a:d0:ee:d5:e4:4e:a9:3b:fa:
         25:5f:8f:bb:9b:22:ee:46:75:10:78:d1:8c:16:b8:5c:5d:d8:
         a6:6c:7c:23:2b:a3:d0:d5:1f:d1:52:36:7c:66:04:7f:2d:46:
         eb:4f:6f:cf:eb:78:90:76:9f:93:e8:e2:23:c4:cf:8b:78:27:
         71:76:9c:9c:b9:53:a6:c4:85:00:23:05:e2:0d:f8:ae:99:1a:
         b8:43:da:0d:26:08:09:32:99:53:03:d4:85:ea:89:b4:35:d4:
         bd:c2:9c:50:3c:71:bd:e4:15:01:cb:04:d5:0d:5f:64:0d:fd:
         c0:58:c6:3e:57:e5:de:49:e7:ef:ea:ca:d8:72:be:43:62:c9:
         a9:14:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:31 2026 by rpki-client